Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File:                     Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier:          pGAKPsDd97BY3tiMBVqv3Wm+WqZsSWFwMi3gir6XH88=
Subject key identifier:   F5:45:1B:50:42:73:B4:01:EC:7E:52:DD:26:70:24:45:07:24:A4:5D
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer:       /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial:       018F885B5B2E63E42840A2A2892B9D5433E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 21:00:39 +0000
Manifest this update:     Fri 17 May 2024 21:00:39 +0000
Manifest next update:     Sat 18 May 2024 21:00:39 +0000
Files and hashes:         1: 1JuT4J75AmOHEZtqeEHh4L3TbSM.roa (hash: sef/hzrD8BNYnH/xy4KtD8zb6rrpjUNXFP6mhk2sCyc=)
                          2: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: nPZ54LuQPHhmutrWKvpCPk/2R0l4pUkhPH7modcf+X0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:5b:2e:63:e4:28:40:a2:a2:89:2b:9d:54:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
        Validity
            Not Before: May 17 21:00:39 2024 GMT
            Not After : May 18 21:00:39 2024 GMT
        Subject: CN=f5451b504273b401ec7e52dd267024450724a45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:68:8e:b8:84:2e:53:52:5d:f4:80:d0:24:
                    84:da:8f:a7:9d:97:a1:f0:c5:6a:3d:53:29:f4:e4:
                    b7:bc:7e:c3:58:9d:93:83:f0:bb:d8:4e:fa:71:d4:
                    ff:a7:30:05:41:0d:5f:13:e5:57:66:62:9f:a5:9d:
                    bb:db:a4:52:b6:2e:71:c8:4c:01:57:3c:55:e1:b0:
                    ad:41:ea:4b:1b:de:34:9a:2a:96:c6:7d:71:d5:5e:
                    29:ce:93:e1:79:62:d8:54:bc:6e:14:c2:37:b1:f5:
                    51:0f:b0:9f:03:6d:fb:ef:16:45:e6:44:96:8d:5b:
                    22:56:ec:f0:7c:82:02:f4:61:2b:7c:72:f4:f8:da:
                    b6:99:67:32:97:26:58:fb:f6:ab:c1:0d:b5:8a:03:
                    bf:af:d9:ae:0a:4e:f8:65:a3:df:d9:dd:50:29:27:
                    3d:ca:1d:28:79:4d:03:91:43:de:61:80:97:72:87:
                    bc:55:8b:96:97:45:26:b3:f8:3f:4e:d4:3d:9e:49:
                    50:24:4a:02:5c:37:ba:be:5f:d0:d3:f9:73:ab:f6:
                    24:8a:16:49:36:86:0a:49:87:d5:31:07:95:cb:21:
                    a6:c8:e4:f9:81:cb:f4:4b:c3:1e:c0:76:5e:a6:74:
                    2f:bb:2b:b3:47:d8:21:79:b7:ab:1e:ba:8e:e0:b3:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:45:1B:50:42:73:B4:01:EC:7E:52:DD:26:70:24:45:07:24:A4:5D
            X509v3 Authority Key Identifier:
                keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f3:99:a7:08:76:17:69:87:46:e3:8d:dc:5d:77:ac:70:de:
         46:27:b9:4a:a1:39:da:e0:71:03:85:58:4b:65:e7:25:ae:1a:
         c8:3e:53:27:76:f3:77:09:57:8c:42:06:5e:4a:2f:f3:8c:1f:
         49:f1:3d:fb:49:36:f8:0b:74:06:13:e0:a2:e8:ae:7a:cc:0b:
         9e:84:44:74:ae:57:88:6d:d2:8b:54:91:75:6f:31:a9:7c:cf:
         9c:9b:80:de:15:65:96:f2:20:9d:2b:45:be:05:21:02:96:78:
         80:f7:d1:ea:63:a5:eb:0c:5b:02:17:d7:cb:1a:a8:6e:23:4b:
         06:6f:bc:e4:64:60:3e:d6:0f:45:bf:68:40:47:e6:d2:d1:ce:
         ed:4b:dc:ef:71:e2:9f:f6:31:4e:09:b8:1b:8a:8d:4b:e6:3a:
         5e:32:0f:03:90:4c:74:f3:ba:af:00:ba:72:f2:89:58:8e:61:
         0d:e5:86:2d:79:43:97:c0:86:0f:80:5d:cc:ed:92:3a:53:50:
         b2:c6:37:e4:11:24:9b:2c:3b:ff:62:3f:ac:fe:f1:bf:fc:7b:
         02:93:24:c1:ff:4e:30:f5:60:60:2d:05:79:98:2e:d3:83:55:
         5e:e6:27:0a:a9:6e:27:d8:d8:36:42:ff:0d:2e:79:a2:e8:5a:
         20:bf:13:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IW1suY+QoQKKiiSudVDPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl
NGRkNmMwHhcNMjQwNTE3MjEwMDM5WhcNMjQwNTE4MjEwMDM5WjAzMTEwLwYDVQQD
EyhmNTQ1MWI1MDQyNzNiNDAxZWM3ZTUyZGQyNjcwMjQ0NTA3MjRhNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9hojriELlNSXfSA0CSE2o+nnZeh
8MVqPVMp9OS3vH7DWJ2Tg/C72E76cdT/pzAFQQ1fE+VXZmKfpZ2726RSti5xyEwB
VzxV4bCtQepLG940miqWxn1x1V4pzpPheWLYVLxuFMI3sfVRD7CfA2377xZF5kSW
jVsiVuzwfIIC9GErfHL0+Nq2mWcylyZY+/arwQ21igO/r9muCk74ZaPf2d1QKSc9
yh0oeU0DkUPeYYCXcoe8VYuWl0Ums/g/TtQ9nklQJEoCXDe6vl/Q0/lzq/YkihZJ
NoYKSYfVMQeVyyGmyOT5gcv0S8MewHZepnQvuyuzR9gheberHrqO4LOR8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVFG1BCc7QB7H5S3SZwJEUHJKRdMB8GA1UdIwQY
MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt
MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm
LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfOZpwh2
F2mHRuON3F13rHDeRie5SqE52uBxA4VYS2XnJa4ayD5TJ3bzdwlXjEIGXkov84wf
SfE9+0k2+At0BhPgouiueswLnoREdK5XiG3Si1SRdW8xqXzPnJuA3hVllvIgnStF
vgUhApZ4gPfR6mOl6wxbAhfXyxqobiNLBm+85GRgPtYPRb9oQEfm0tHO7Uvc73Hi
n/YxTgm4G4qNS+Y6XjIPA5BMdPO6rwC6cvKJWI5hDeWGLXlDl8CGD4BdzO2SOlNQ
ssY35BEkmyw7/2I/rP7xv/x7ApMkwf9OMPVgYC0FeZgu04NVXuYnCqluJ9jYNkL/
DS55ouhaIL8THQ==
-----END CERTIFICATE-----
Generated at Sat May 18 00:27:31 2024 by rpki-client on console-ams.rpki-client.org